Malicious
be299c73b3cfa6b8e7952dc15df4746c
ZIP Archive
MD5: be299c73b3cfa6b8e7952dc15df4746c
Size: 618 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
618 B · 618 B
First seen
2026-08-03 12:57 · 2 months ago
Last seen
2026-08-03 12:57 · 2 months ago
Last analysis
2026-08-03 12:57 · 2 months ago
Hashes
MD5
be299c73b3cfa6b8e7952dc15df4746c
Sha1
22c0cac160d3ac5dfa348b14d3a139c47e38e165
Sha256
9867a593adfa020d130195809fe39b6a5d60be6c7ba173b28a817b8dae1eba09
Sha384
b4bdf12696654a0a42a1abab97438c0abbf15d04ca9690ea4472070da703115c102ec6ca65e19189cdf181c8f7e32d11
Sha512
c3551ff2b96e196e289086699fdc7292395aca3a92ccc7ce399a00624bac0f8f978b6fee244a808a02fbb2e57b989aa27de03a7a49e996d4e266419965d8ef99
SSDeep
12:5jN15BPJZ9EiFyJrKh7jQ0BzzCetIB22PItXVw/8Mtneep2z15fEa+:9N17v9jy9KRBPCA+27FAtneNz1o
TLSH
C4F0B78312405493C8720D72E7E44100D286B0D68B7F59DCF9C452F320397449AC3C18
3 malicious · 3 files
ZIPbe299c73b3cfa6b8e7952dc15df4746cT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKNota_xml_-XVITOM.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPbe299c73b3cfa6b8e7952dc15df4746cT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKNota_xml_-XVITOM.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
be299c73b3cfa6b8e7952dc15df4746c › Nota_xml_-XVITOM.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account